Assigning the right roles and permissions ensures that your team can collaborate effectively while maintaining strict data security. In Sastrify, access is governed by three distinct roles: Admin, Contributor, and Viewer.


  • Admin: Provides full, unrestricted access to the entire platform, including all settings and integrations.

  • Contributor: Designed for subscription owners and departmental stakeholders. They have access only to specific invited subscriptions.

  • Viewer: This is a read-only role. Unlike admins and contributors, this role cannot make any edits.

Detailed Permissions Matrix


The following table outlines what each role can perform across the platform's core features.


  Permissions

Admin

Contributor

Viewer


Inventory

View tool stack

✔

✔

✘

Create subscription

✔

✔

✘

Edit subscription

✔

✔(1)

✘

Delete subscription

✔

✘

✘

View spend info

✔

✔(1)

✘

Manage spend

✔

✔(1)

✘

Manage documents

✔

✔(1)

✘

Create tasks

✔

✔(1)

✘

Add comments

✔

✔(1)

✘


Risk Monitoring

View Shadow IT Radar

✔

✘

✘
Perform actions

✔

✘
✘

Insights

View Insights✔

✘

✘

Procurement Support

Involve Sastrify

✔

✔

✔

View procurement supports

✔

✔

✔
Add comments

✔

✔✔

 Requests

View requests

✔

✔

✔

Create requests

✔

✔(1)

✔

Edit requests

✔

✔(1)

✔(2)

Delete requests

✔

✘

✘

Can be tagged in requests

✔

✔

✘

Can tag other users in requests

✔

✔

✘


Savings

View savings

✔

✔(1)✘

Integrations

Manage integrations

✔

✘

✘

Manage identities✔✘✘
Assign managers
✔

✘

✘

Settings

Invite users

✔

✘

✘

Edit users

✔

✘

✘

Delete users

✔

✘

✘

Manage authentication

✔

✘

✘

Create workflows

✔

✘

✘

Create automated tasks✔

✘

✘
Edit renewal settings

✔

✘
✘
View renewal settings

✔

✔

✔

Manage company-wide notifications

✔

✘

✘

Manage personal notifications

✔

✔

✔



(1) This action is only available if the user has access to the appropriate subscription.

(2) Edit requests: Viewers can view, comment, attach documents, and act on tasks assigned to them. They cannot perform additional edits.